build.yaml: don't run untrusted submissions

This commit is contained in:
Chris Yeninas 2021-11-27 06:02:53 -05:00
parent 8a877082da
commit 92473a5632

View File

@ -8,6 +8,9 @@ on:
jobs:
build:
# only runs if:
# not a PR, PR is approved, or PR is pushed by the repo owner or a collaborator
if: not github.base_ref || github.event.review.state == 'approved' || github.event.review.author_association == 'COLLABORATOR' || github.event.review.author_association == 'OWNER'
runs-on: windows-latest
steps: